General
- Target 13082026_0034_12082026_NEW-EHETOHEYOVAME.lnk.zip
- Size 4KB
- Sample260813-aw4e9afh77
- SHA256 786f5947fd5fe904eff1d4adaa4584fda32f523a1213c8334180a7838e90787a
- MD5 cec80a1943f36fb776c009799f061765
- SHA1 01cba67e87df52a583885a9d04519c37ede568e3
- SHA512 0ab5ed83b77cb9f8099dccb6e453e10242311b92a6a93985104c4bcdc456f0153e11932f856fcea80608dae90bab5c2a546c833f365416c254b8845ad228be3b
- SSDEEP 96:O3k2dNVlPaCboCYLWvA+F8VeGC3ADzJrvn3uJao29:qkIlPa7Cw+F8YGCQDzpveao0
- TLSH T1BC815E1DA50530BC698B8EF6B8990311EBC062BC5913167AB67A3F4F4DE49785C18A48
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
NEW-EHETOHEYOVAME.lnk
Resource
win10v2004-20260513-en
5 signatures
300 seconds
Behavioral task
behavioral2
Sample
NEW-EHETOHEYOVAME.lnk
Resource
win11ltsc2024-20260709-en
4 signatures
300 seconds
Malware Config
Targets
-
- Target NEW-EHETOHEYOVAME.lnk
- Size 8KB
- SHA256 9a0c4062fd1fec2d9b4b603549da4473ed145fce83929acaab843fc766e51647
- MD5 93a9eee062ca75b7b9b7fd7bfc0aad2a
- SHA1 1b2180da5509db46c700a2fd980b192ba8028041
- SHA512 38b6a084ab9a1850f70707546360e355605a6c7d900fd4380b7385ec10c9caaf95f1d04bd1c79df691118249c212ac75a193dae1bf0f61c31a94e22b27af9829
- SSDEEP 192:8ZYkynNen1GX8+gKAoY+DN2+cfCXe4yx2M6VYURz6WZ:QYkynNI1bLoY+JncfCXfTMkb6
- TLSH T1C502113465FB1019D173FBBB4BDEACABDF7AB621523B256E20A143478601801EE56339
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Indirect Command Execution
Adversaries may abuse utilities that allow for command execution to bypass security restrictions that limit the use of command-line interpreters.